$ rpki-client -vvf repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/3130332e3231322e3137382e302f32342d3234203d3e2039333431.roa File: 3130332e3231322e3137382e302f32342d3234203d3e2039333431.roa (raw, json) Hash identifier: zBeoA45+pWdqka5XtO4MP/M+DFGL6pvvaMdBwJOxKOw= Subject key identifier: F7:2F:38:77:95:05:55:DB:4B:34:3F:EA:50:6D:BB:02:3D:64:97:E0 Certificate issuer: /CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804 Certificate serial: 7B37013F3AADCEEA684636597F1798F4971A2434 Authority key identifier: 38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/3130332e3231322e3137382e302f32342d3234203d3e2039333431.roa Signing time: Fri 06 Sep 2024 08:00:00 +0000 ROA not before: Fri 06 Sep 2024 07:55:00 +0000 ROA not after: Fri 05 Sep 2025 08:00:00 +0000 asID: 9341 IP address blocks: 103.212.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Nov 2024 09:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:37:01:3f:3a:ad:ce:ea:68:46:36:59:7f:17:98:f4:97:1a:24:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804 Validity Not Before: Sep 6 07:55:00 2024 GMT Not After : Sep 5 08:00:00 2025 GMT Subject: CN=F72F3877950555DB4B343FEA506DBB023D6497E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:28:8d:f4:24:5d:cc:a3:d4:77:b3:23:3b:2c: 5d:f0:33:08:8d:af:69:e5:24:e3:76:f3:f8:cc:c7: ac:61:54:67:7f:8c:d5:db:f7:2e:7a:4a:b1:3a:08: bd:80:1a:ed:61:7a:c1:d4:92:59:10:ee:ab:b5:11: b6:db:5e:17:13:90:80:9a:57:cf:2a:86:24:eb:0d: aa:77:58:31:32:f1:3c:cc:0b:05:4b:37:d2:99:6b: 6d:3a:d9:8c:f0:e2:01:e7:b0:7b:b0:25:6a:3b:da: 54:10:ed:56:28:aa:25:92:56:44:55:06:26:97:6b: c8:7e:d2:71:eb:10:2c:99:e9:6a:30:24:8d:42:cc: 74:b9:17:dd:64:89:af:7a:da:28:77:a7:a8:93:98: 0e:9f:ef:c7:ec:8b:a2:28:1f:9f:b7:0d:80:fe:fe: 90:4a:19:19:88:29:ae:90:13:5a:24:af:e8:62:7a: 21:57:24:93:73:bb:aa:04:a0:69:07:35:6d:55:07: 88:32:1b:96:c2:df:c7:a9:77:3b:41:62:84:f9:63: 95:34:2e:64:0d:fb:a1:37:78:16:d3:8e:4d:7d:d8: 58:a6:97:26:a9:56:ef:18:2f:f7:88:b9:05:66:cb: 21:71:b3:a0:f5:40:0b:dc:d9:54:13:92:98:d9:75: 28:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:2F:38:77:95:05:55:DB:4B:34:3F:EA:50:6D:BB:02:3D:64:97:E0 X509v3 Authority Key Identifier: keyid:38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/3130332e3231322e3137382e302f32342d3234203d3e2039333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.212.178.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:29:57:a6:1b:dc:1b:5e:6f:2d:44:82:e5:f2:d9:82:86:8d: dc:81:06:7c:44:85:12:8e:62:09:33:7a:81:76:fe:1d:6e:53: 8c:ac:5e:51:ca:d8:f1:33:74:9d:54:ba:73:6f:f7:04:72:7b: 9c:95:30:ac:41:49:0f:c6:93:8d:c8:e9:32:00:0f:4e:0a:6e: 39:b9:ed:3c:48:d7:be:4d:a4:31:ae:42:f1:53:60:9b:ae:e7: df:44:f6:77:af:80:29:20:29:dd:46:98:3d:2b:1b:a9:02:d5: c6:77:f6:42:39:f8:a2:14:53:ac:ce:d3:0d:cf:55:f3:69:7c: 79:80:83:03:60:e3:91:07:cb:11:03:0c:e3:a3:c9:e1:cf:ae: 7a:29:8b:c1:24:18:3b:17:78:d0:51:0d:58:1a:8d:eb:d9:9a: b1:1b:33:91:12:ac:16:f2:cc:10:83:93:49:f0:38:c4:2c:de: 88:cc:01:db:97:c7:d1:73:24:47:58:8f:06:e0:14:9b:ad:40: 51:24:6d:6a:2c:70:67:59:b1:6c:2e:b8:d1:e0:86:1a:31:0c: 73:72:90:11:36:05:f8:9f:ed:65:9b:ef:5c:1c:33:cc:10:f6: 84:5a:60:11:77:aa:71:d9:b8:57:64:32:d4:44:ad:dc:5f:eb: fa:65:f3:2c -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUezcBPzqtzupoRjZZfxeY9JcaJDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdFREFD MjgyRDgwNDAeFw0yNDA5MDYwNzU1MDBaFw0yNTA5MDUwODAwMDBaMDMxMTAvBgNV BAMTKEY3MkYzODc3OTUwNTU1REI0QjM0M0ZFQTUwNkRCQjAyM0Q2NDk3RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7KI30JF3Mo9R3syM7LF3wMwiN r2nlJON28/jMx6xhVGd/jNXb9y56SrE6CL2AGu1hesHUklkQ7qu1EbbbXhcTkICa V88qhiTrDap3WDEy8TzMCwVLN9KZa2062Yzw4gHnsHuwJWo72lQQ7VYoqiWSVkRV BiaXa8h+0nHrECyZ6WowJI1CzHS5F91kia962ih3p6iTmA6f78fsi6IoH5+3DYD+ /pBKGRmIKa6QE1okr+hieiFXJJNzu6oEoGkHNW1VB4gyG5bC38epdztBYoT5Y5U0 LmQN+6E3eBbTjk192FimlyapVu8YL/eIuQVmyyFxs6D1QAvc2VQTkpjZdSj7AgMB AAGjggIyMIICLjAdBgNVHQ4EFgQU9y84d5UFVdtLND/qUG27Aj1kl+AwHwYDVR0j BBgwFoAUOFytqdWbFbX0jcuhyAt+2sKC2AQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjY0YTc4Yy1kZDRjLTRjOWQtYmNmMC02ZGU2Y2RiOTI1YjAvMC8zODVDQURBOUQ1 OUIxNUI1RjQ4RENCQTFDODBCN0VEQUMyODJEODA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdFREFDMjgy RDgwNC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzViNjRhNzhjLWRkNGMtNGM5ZC1i Y2YwLTZkZTZjZGI5MjViMC8wLzMxMzAzMzJlMzIzMTMyMmUzMTM3MzgyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfUsjANBgkqhkiG 9w0BAQsFAAOCAQEADSlXphvcG15vLUSC5fLZgoaN3IEGfESFEo5iCTN6gXb+HW5T jKxeUcrY8TN0nVS6c2/3BHJ7nJUwrEFJD8aTjcjpMgAPTgpuObntPEjXvk2kMa5C 8VNgm67n30T2d6+AKSAp3UaYPSsbqQLVxnf2Qjn4ohRTrM7TDc9V82l8eYCDA2Dj kQfLEQMM46PJ4c+ueimLwSQYOxd40FENWBqN69masRszkRKsFvLMEIOTSfA4xCze iMwB25fH0XMkR1iPBuAUm61AUSRtaixwZ1mxbC640eCGGjEMc3KQETYF+J/tZZvv XBwzzBD2hFpgEXeqcdm4V2Qy1ESt3F/r+mXzLA== -----END CERTIFICATE-----Generated at Thu Nov 21 09:17:19 2024 by rpki-client on console-fra.rpki-client.org